How taimourmushtaq/techfusion-hackathon-26 works
Orbit Triage is a security-incident triage assistant. Analysts provide a dataset through the CLI or web app; deterministic analysis normalizes logs and references, correlates identities and events, identifies findings and gaps, checks approved changes, scores severity, and produces a cited incident report. The web app also supports grounded follow-up questions, with optional LLM generation and citation validation. The graph follows the documented workflow and sampled imports/calls; several internal details are represented at subsystem level where implementation excerpts were incomplete.
Main entry points: pipeline.py Analysis pipeline · main.py Web API · llm.py LLM client · __main__.py CLI entry
Components 19
Analyst access
- CLI entry
triage/__main__.py - Web API
app/main.py - Web interface
app/static/index.html
Dataset normalization
- File ingestion
triage/ingest.py - Time parsing
triage/timeparse.py - Event parsing
triage/events.py - Log coverage
triage/coverage.py - Data gaps
triage/gaps.py
Incident analysis
- Analysis pipeline
triage/pipeline.py - Entity resolution
triage/entities.py - Finding detection
triage/detect.py - Reference evaluation
triage/reference.py
Reports and follow-up
- Incident report
triage/report.py - Question answering
triage/qa.py - LLM client
triage/llm.py
Other components
- Analyst
- Dataset files
- Groq API
- OpenRouter API
Connections 20
- Analyst → CLI entry: runs analysis
README.md - Analyst → Web interface: uses web app
README.md - Web interface → Web API: requests analysis
- Dataset files → CLI entry: supplies files
README.md - Dataset files → Web API: uploads files
README.md - CLI entry → Analysis pipeline: runs analysis
triage/__main__.py - Web API → Analysis pipeline: analyzes dataset
app/main.py - Analysis pipeline → File ingestion: loads files
README.md - Analysis pipeline → Time parsing: normalizes timestamps
README.md - Analysis pipeline → Event parsing: builds events
README.md - Analysis pipeline → Log coverage: checks coverage
triage/pipeline.py - Analysis pipeline → Data gaps: finds missing data
triage/pipeline.py - Analysis pipeline → Entity resolution: resolves identities
README.md - Analysis pipeline → Finding detection: detects findings
README.md - Analysis pipeline → Reference evaluation: evaluates references
README.md - Analysis pipeline → Incident report: renders report
triage/pipeline.py - Web API → Question answering: answers questions
app/main.py - Question answering → LLM client: requests generation
triage/qa.py - LLM client → Groq API: tries provider
triage/llm.py - LLM client → OpenRouter API: falls back
triage/llm.py